Vulnerability GO-2024-3336
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
December 18, 2024 at 04:35 PM UTC
MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio
>=0.0.0-20220623162515-580d9db85e04 <0.0.0-20241213221912-68b004a48f41
>=0.0.0-20220623162515-580d9db85e04 <0.0.0-20241213221912-68b004a48f41
Summary
MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio
Details
MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint in github.com/minio/minio
>=0.0.0 GO-2026-5757
>=0.0.0 GO-2026-5757
Unknown
3 months ago
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
Medium Risk
5 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
Impacted packages
Timeline
Published
1 year ago
December 18, 2024 at 04:35 PM UTC
Last Modified
2 hours ago
October 08, 2026 at 08:11 AM UTC